Cyber SOC Manager

Booz Allen Hamilton•Usa, NV

4d•Onsite

About The Position

As the Cyber Security Operations Center (SOC) Manager, you will lead the organization’s incident response operations, ensuring all activities are efficient and aligned with policy and mission objectives. This role facilitates communication and collaboration across teams and stakeholders during security incidents, develops and maintains comprehensive incident response plans and playbooks, and conducts thorough post-incident reviews to identify root causes and recommend remediation strategies. The manager provides clear direction under pressure, maintains executive-level communication, and drives continuous improvement in the organization’s security posture.

Requirements

Experience with security operations, incident response, threat analysis, and cybersecurity tools such as EDR, SIEM, IDS / IPS, and Log Analysis, for both on-premises and cloud-based environments
Experience applying incident response methodologies in operational environments
Experience with leadership, including leading teams, managing projects, and providing technical guidance
Ability to articulate technical concepts clearly
Ability to make effective decisions in high-pressure situations
Top Secret clearance
Bachelor’s degree in Cybersecurity, IT, or CS and 12+ years of experience with cybersecurity, supervising multiple enterprise SOC teams and monitoring multiple unclassified and classified networks spanning multiple geographically disbursed locations, or Master’s degree in Cybersecurity or Information Security and 10+ years of experience with cybersecurity, supervising multiple enterprise SOC teams and monitoring multiple unclassified and classified networks spanning multiple geographically disbursed locations
CISSP, Certified Information Security Manager (CISM), GIAC Certified Incident Handler (GCIH), or Certified SOC Analyst (CSA) Certification

Nice To Haves

Experience coordinating complex incidents involving multiple business units or locations
Knowledge of post-incident analysis techniques and root-cause remediation planning
Knowledge of cybersecurity principles, SOC operations, and incident response techniques
Ability to develop and implement strategic initiatives that enhance SOC operations
Possession of strong verbal and written communication skills
TS/SCI clearance

Responsibilities

Lead and oversee the organization’s incident response operations, ensuring all activities are executed efficiently and in accordance with established policies and mission objectives.
Coordinate response efforts across cross-functional teams and stakeholders to facilitate effective communication and collaboration during security incidents.
Develop, implement, and maintain comprehensive incident response plans and playbooks, continuously improving processes based on lessons learned and industry best practices.
Conduct thorough post-incident reviews to identify root causes, recommend remediation strategies, and drive continuous improvement in security posture.
Provide clear direction and guidance to team members during high-pressure situations, maintaining executive-level communication and documentation throughout the incident lifecycle.